Debug Logging Vulnerability in Cisco Duo Authentication Proxy

CVE-2025-20345

What is CVE-2025-20345?

A vulnerability exists in the debug logging function of Cisco Duo Authentication Proxy that allows a high-privileged, authenticated remote attacker to access sensitive information within system log files. This issue arises from inadequate masking of critical data before it is recorded in the logs. An attacker exploiting this flaw could gain visibility into sensitive information that is typically restricted, posing serious risks to system integrity and data confidentiality.

References